VidToPixarVidToPixar

Privacy

Your story stays private

How we collect, use and protect your data — photos, payments, cookies, and your GDPR and CCPA rights.

Who we are

VidToPixar (“we”, “us”) provides personalized Pixar-style 3D animated films from customer photos. Business address: Rua Angola 16, Olival Basto 2620-067, Portugal. Contact: support@vidtopixar.com.

What data we collect

  • Order details: your name and email address, the recipient's name, story text, occasion, special details, music/voice preferences and film length.
  • Photos: the images you upload so we can design the characters and scenes of your film.
  • Email address & account: used for order updates, your customer account (password stored only as a secure hash) and, if you sign up, the $5 welcome code.
  • Payment data: processed by Stripe — we never see or store full card numbers; we receive limited payment metadata (status, amount, card brand/last4).
  • Technical data: IP address and basic browser/device information in server logs (security and abuse prevention), and the cookies described below.

Why we process data (legal bases)

  • To create and deliver your digital film, revisions and support (contract).
  • To take payments and prevent fraud (contract / legitimate interests).
  • To keep accounting and handle payment disputes (legal obligation).
  • Optional analytics and marketing cookies only with your consent (consent).

Processors we use

  • Stripe — payments and fraud checks (Stripe Privacy Policy). Card details go directly to Stripe.
  • Google Drive (Google LLC) — secure storage of the finished films we deliver to you. Films are streamed to you through our site; Drive links are never public.
  • Hostinger — email delivery (order, account and support emails) and domain services.
  • Meta Platforms (Facebook/Instagram) — only with your Marketing consent — ad measurement via the Meta Pixel and the Meta Conversions API (see below).
  • Our VPS hosting provider (EU) — runs the website and stores order data and uploaded photos.

Processors act on our instructions under data-processing terms. We do not sell your personal data.

Cookies

  • Necessary (always on): sign-in sessions for your customer account, checkout security, vtp_consent which remembers your cookie choice for 12 months, and vtp_locale which remembers your language choice.
  • Analytics (optional): e.g. Google Analytics — only loaded if you accept Analytics.
  • Marketing (optional): Meta Pixel cookies (_fbp, _fbc) for measuring our Facebook/Instagram ads — only set if you accept Marketing.

Meta Pixel and Conversions API (advertising)

If — and only if — you accept Marketing cookies, we tell Meta when you view our site, start an order, sign up for the $5 code (Lead) or complete a purchase, so we can measure and improve our Facebook/Instagram ads. This happens in your browser (Meta Pixel) and from our server (Meta Conversions API). The server sends: your email address hashed with SHA-256 (never in plain text), your IP address and browser user agent, the Meta cookie ids (_fbp/_fbc, including an ad click id if you arrived from an ad), and order details (order id, package, amount, currency). Meta acts as a joint controller/processor under its Privacy Policy. If you reject Marketing, use “Do Not Sell or Share”, or your browser sends Global Privacy Control, nothing is sent to Meta. Under US state laws this sharing may count as “sharing for cross-context behavioral advertising” — you can opt out any time.

You can change or withdraw your choice at any time with “Cookie settings” in the footer. If your browser sends a Global Privacy Control signal, we treat it as an opt-out of marketing cookies (sale/sharing).

Retention

  • Photos: used only to make your film and deleted within 30 days after the film is completed and delivered (longer only if an open revision or a legal/payment dispute requires it).
  • Finished films: kept so you can re-download them from your account; ask us anytime to delete them.
  • Order and payment records: kept as long as tax/accounting law requires.
  • Cookie choice: 12 months, then we ask again.

Your rights (GDPR / UK GDPR)

If you are in the EEA or UK, you have the right to:

  • Access the personal data we hold about you and get a copy
  • Correct inaccurate data or have your data deleted
  • Restrict or object to certain processing
  • Data portability for information you provided
  • Withdraw consent at any time (e.g. cookies) without affecting earlier processing
  • Lodge a complaint with your data-protection authority (in Portugal: CNPD)

Your California / US state privacy rights (CCPA/CPRA)

  • Right to know the categories and specific pieces of personal information we collect (listed above) and how we use them.
  • Right to delete and right to correct your personal information.
  • Right to opt out of sale or sharing: we do not sell personal information. Optional marketing cookies may count as “sharing” for cross-context advertising — use “Do Not Sell or Share My Personal Information” in the footer (or a Global Privacy Control signal) to opt out.
  • Right to limit use of sensitive personal information — we do not use it for purposes that require this right.
  • No discrimination for exercising your rights.

How to make a request

Email support@vidtopixar.com from the email address used for your order. We reply within 30 days (GDPR) / 45 days (CCPA) and may need to verify your identity first.

International transfers

We are based in Portugal (EU). Some processors (e.g. Stripe, Google) may process data outside the EU under appropriate safeguards such as Standard Contractual Clauses.

Contact

Privacy questions: support@vidtopixar.com · Imprint · Contact

Last updated: October 8, 2026.